CVE-2022-23434

published 2022-02-11

CVE-2022-23434: A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to…

low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C N I L A N

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
samsung	bixby	< 3.7.50.6	3.7.50.6
samsung	bixby	< 3.7.60.8	3.7.60.8
samsung_mobile	bixby_vision	>= - < 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below	3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below

CWE-94